CVE-2024-27416

MEDIUM

Linux Kernel 4.14.328-4.15 - Denial of Service via Bluetooth HCI_EV_IO_CAPA_REQUEST Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST If we received HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generated.

References (10)

Core 10
Core References

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 5.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (31)
debian/debian_linux 10.0
Linux/Linux < 6.6
Linux/Linux 1769ac55dbf3114d5bf79f11bd5dca80ee263f9c - 79820a7e1e057120c49be07cbe10643d0706b259
Linux/Linux 1ef071526848cc3109ade63268854cd7c20ece0c - c3df637266df29edee85e94cab5fd7041e5753ba
Linux/Linux 25e5d2883002e235f3378b8592aad14aeeef898c - 30a5e812f78e3d1cced90e1ed750bf027599205f
Linux/Linux 2c7f9fda663a1b31a61744ffc456bdb89c4efc7f
Linux/Linux 4.14.328 - 4.15
Linux/Linux 4.19.297 - 4.19.309
Linux/Linux 4.19.309 - 4.19.*
Linux/Linux 40a33a129d99639921ce00d274cca44ba282f1ac - df193568d61234c81de7ed4d540c01975de60277
... and 21 more
Published May 17, 2024
Tracked Since Feb 18, 2026